This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/d52e84-eb84-45c2-b6c5-51c1faa4718f/1/0bvzaAza5sJnqY0D0I9rI9DtHUY.mft File: 0bvzaAza5sJnqY0D0I9rI9DtHUY.mft (raw, json) Hash identifier: umvaTL43ZWYUjSaumQ/ANQr9exEVvT3okneIbdPrhWE= Subject key identifier: 85:1C:42:14:BA:6D:BF:C5:CD:B8:C9:40:62:D6:D0:7A:CD:F6:FB:30 Authority key identifier: D1:BB:F3:68:0C:DA:E6:C2:67:A9:8D:03:D0:8F:6B:23:D0:ED:1D:46 Certificate issuer: /CN=d1bbf3680cdae6c267a98d03d08f6b23d0ed1d46 Certificate serial: 019B5004D620560F08F41BDAB7C2BC2BACB7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0bvzaAza5sJnqY0D0I9rI9DtHUY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/d52e84-eb84-45c2-b6c5-51c1faa4718f/1/0bvzaAza5sJnqY0D0I9rI9DtHUY.mft Manifest number: 1794 Signing time: Wed 24 Dec 2025 11:00:52 +0000 Manifest this update: Wed 24 Dec 2025 11:00:52 +0000 Manifest next update: Thu 25 Dec 2025 11:00:52 +0000 Files and hashes: 1: 0bvzaAza5sJnqY0D0I9rI9DtHUY.crl (hash: YY8G/DdIFbj0aG1q2yuaXN33mbf5lbNZvQ/hgMHmebM=) 2: Mbm6QXqJoPSY8lmJ2uuYnoixdss.roa (hash: YVUXdFTCHChTHodePJ+65GQKTip7VafzN3LWZ67guNY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/d52e84-eb84-45c2-b6c5-51c1faa4718f/1/0bvzaAza5sJnqY0D0I9rI9DtHUY.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/d52e84-eb84-45c2-b6c5-51c1faa4718f/1/0bvzaAza5sJnqY0D0I9rI9DtHUY.mft rsync://rpki.ripe.net/repository/DEFAULT/0bvzaAza5sJnqY0D0I9rI9DtHUY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:04:d6:20:56:0f:08:f4:1b:da:b7:c2:bc:2b:ac:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1bbf3680cdae6c267a98d03d08f6b23d0ed1d46 Validity Not Before: Dec 24 11:00:52 2025 GMT Not After : Dec 25 11:00:52 2025 GMT Subject: CN=851c4214ba6dbfc5cdb8c94062d6d07acdf6fb30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ab:e5:e6:22:86:1d:8a:ef:80:b6:9c:23:31: 43:dd:8a:f1:f9:75:c0:27:7a:ae:b5:c9:d0:2c:fb: b4:9c:72:46:27:91:d6:3e:b8:8b:2d:e7:68:f9:65: a6:40:74:8c:43:6a:55:4a:48:f4:62:70:91:65:eb: 1a:40:9f:48:82:c7:c2:ba:da:d5:67:07:81:3c:13: 92:a1:8c:ed:22:3c:aa:3c:97:6a:c7:53:8e:1a:00: d4:71:28:54:27:33:2d:2c:6a:04:1b:3d:6d:f1:28: 70:ad:68:80:c0:60:a8:ea:0a:8a:8b:f5:65:a5:ad: a9:6a:07:24:d6:9e:ea:20:b6:64:d0:94:f9:25:35: 29:42:ee:76:b6:50:9a:65:79:e5:2c:cf:e1:73:3a: 2f:b3:a0:5c:0f:b1:19:49:91:db:f5:26:1e:c8:ab: 48:24:66:5a:86:63:6b:a8:53:92:c1:aa:9c:1a:54: e0:e7:b5:b0:6f:c3:76:ec:ca:93:1b:f4:55:e3:36: 92:c8:94:64:67:a5:1b:da:38:a6:80:cd:b8:be:57: 74:28:84:70:ae:d7:57:5a:d9:ef:7c:38:a3:43:b7: 41:2f:24:56:74:16:c1:05:27:c4:f5:3f:95:a0:a9: f5:ad:50:15:23:d1:6b:2d:0d:36:ec:52:b2:b1:da: 53:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:1C:42:14:BA:6D:BF:C5:CD:B8:C9:40:62:D6:D0:7A:CD:F6:FB:30 X509v3 Authority Key Identifier: keyid:D1:BB:F3:68:0C:DA:E6:C2:67:A9:8D:03:D0:8F:6B:23:D0:ED:1D:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0bvzaAza5sJnqY0D0I9rI9DtHUY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d52e84-eb84-45c2-b6c5-51c1faa4718f/1/0bvzaAza5sJnqY0D0I9rI9DtHUY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d52e84-eb84-45c2-b6c5-51c1faa4718f/1/0bvzaAza5sJnqY0D0I9rI9DtHUY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:33:1a:f8:f6:7a:3f:fd:d9:7f:59:6f:05:70:60:d4:b1:2b: 9b:d4:4c:2e:01:78:bf:d3:0f:37:11:2c:79:6a:c7:1b:10:3d: a1:ea:a5:0e:84:e8:91:9c:c7:ed:2c:90:96:b4:74:62:c6:53: b4:75:c6:6d:ce:23:b6:ff:20:0a:f2:79:21:0c:59:55:4b:f7: 1c:cd:93:26:e6:01:fd:73:0c:41:ec:a5:68:5b:55:61:43:ee: dd:27:00:55:63:d0:d3:ef:87:af:fe:4f:5e:2b:e5:dc:5c:b7: 04:00:67:73:a6:ed:a1:be:3a:e0:8f:4b:b0:92:46:83:02:d7: cb:8b:52:04:05:42:13:5c:e1:a7:99:36:78:62:80:37:f6:38: 6b:84:ae:c9:b8:80:e8:00:e7:27:57:81:c6:2f:1f:80:5b:31: 8a:78:7a:63:52:8c:39:60:48:de:e9:4b:7a:a4:46:c1:e7:d0: a8:3a:d0:17:f4:77:f3:a5:cc:ab:96:86:7a:97:90:3b:ed:f2: 49:df:e3:4d:e7:2d:66:ca:d2:61:4c:19:36:71:1b:14:64:3b: d9:5f:dd:1d:dc:79:fb:3b:51:fe:fa:6f:8b:9a:03:06:05:07: 97:fb:de:6f:f7:d1:fe:20:a1:79:2a:3a:0e:f8:73:d7:82:17: e9:c7:75:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQBNYgVg8I9Bvat8K8K6y3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxYmJmMzY4MGNkYWU2YzI2N2E5OGQwM2QwOGY2YjIzZDBl ZDFkNDYwHhcNMjUxMjI0MTEwMDUyWhcNMjUxMjI1MTEwMDUyWjAzMTEwLwYDVQQD Eyg4NTFjNDIxNGJhNmRiZmM1Y2RiOGM5NDA2MmQ2ZDA3YWNkZjZmYjMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Kvl5iKGHYrvgLacIzFD3Yrx+XXA J3qutcnQLPu0nHJGJ5HWPriLLedo+WWmQHSMQ2pVSkj0YnCRZesaQJ9IgsfCutrV ZweBPBOSoYztIjyqPJdqx1OOGgDUcShUJzMtLGoEGz1t8ShwrWiAwGCo6gqKi/Vl pa2pagck1p7qILZk0JT5JTUpQu52tlCaZXnlLM/hczovs6BcD7EZSZHb9SYeyKtI JGZahmNrqFOSwaqcGlTg57Wwb8N27MqTG/RV4zaSyJRkZ6Ub2jimgM24vld0KIRw rtdXWtnvfDijQ7dBLyRWdBbBBSfE9T+VoKn1rVAVI9FrLQ027FKysdpTDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIUcQhS6bb/FzbjJQGLW0HrN9vswMB8GA1UdIwQY MBaAFNG782gM2ubCZ6mNA9CPayPQ7R1GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGJ2emFBemE1c0pucVkwRDBJOXJJOUR0SFVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9kNTJlODQtZWI4NC00NWMyLWI2YzUt NTFjMWZhYTQ3MThmLzEvMGJ2emFBemE1c0pucVkwRDBJOXJJOUR0SFVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9kNTJlODQtZWI4NC00NWMyLWI2YzUtNTFjMWZhYTQ3MThm LzEvMGJ2emFBemE1c0pucVkwRDBJOXJJOUR0SFVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARTMa+PZ6 P/3Zf1lvBXBg1LErm9RMLgF4v9MPNxEseWrHGxA9oeqlDoTokZzH7SyQlrR0YsZT tHXGbc4jtv8gCvJ5IQxZVUv3HM2TJuYB/XMMQeylaFtVYUPu3ScAVWPQ0++Hr/5P Xivl3Fy3BABnc6btob464I9LsJJGgwLXy4tSBAVCE1zhp5k2eGKAN/Y4a4SuybiA 6ADnJ1eBxi8fgFsxinh6Y1KMOWBI3ulLeqRGwefQqDrQF/R386XMq5aGepeQO+3y Sd/jTectZsrSYUwZNnEbFGQ72V/dHdx5+ztR/vpvi5oDBgUHl/veb/fR/iCheSo6 Dvhz14IX6cd1qg== -----END CERTIFICATE-----Generated at Wed Dec 24 15:16:24 2025 by rpki-client